@tqbf don't we have to trust the third-party executables in a similar manner?